From 65eff7fbdbddad8c1f9af7cb48cd3b5dca3c5c9d Mon Sep 17 00:00:00 2001 From: Sunyeop Lee Date: Fri, 24 Mar 2017 11:08:28 +0530 Subject: Update old tunables framework document/script. Since commit 8b9e9c3c0bae497ad5e2d0ae2f333f62feddcc12, security_level replaces is_secure. There were some old files need to be updated. 2017-03-23 Sunyeop Lee * README.tunables: Updated descriptions. * elf/dl-tunables.list: Fixed typo: SXID_NONE -> NONE. * scripts/gen-tunables.awk: Updated the code related to the commit. --- scripts/gen-tunables.awk | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) (limited to 'scripts') diff --git a/scripts/gen-tunables.awk b/scripts/gen-tunables.awk index e7bfc22b05..601240ac0d 100644 --- a/scripts/gen-tunables.awk +++ b/scripts/gen-tunables.awk @@ -51,8 +51,8 @@ $1 == "}" { if (!env_alias[top_ns][ns][tunable]) { env_alias[top_ns][ns][tunable] = "NULL" } - if (!is_secure[top_ns][ns][tunable]) { - is_secure[top_ns][ns][tunable] = "SXID_ERASE" + if (!security_level[top_ns][ns][tunable]) { + security_level[top_ns][ns][tunable] = "SXID_ERASE" } tunable = "" @@ -104,12 +104,12 @@ $1 == "}" { } else if (attr == "security_level") { if (val == "SXID_ERASE" || val == "SXID_IGNORE" || val == "NONE") { - is_secure[top_ns][ns][tunable] = val + security_level[top_ns][ns][tunable] = val } else { - printf("Line %d: Invalid value (%s) for is_secure: %s, ", NR, val, + printf("Line %d: Invalid value (%s) for security_level: %s, ", NR, val, $0) - print("Allowed values are 'true' or 'false'") + print("Allowed values are 'SXID_ERASE', 'SXID_IGNORE', or 'NONE'") exit 1 } } @@ -148,7 +148,7 @@ END { printf (" {TUNABLE_NAME_S(%s, %s, %s)", t, n, m) printf (", {TUNABLE_TYPE_%s, %s, %s}, {.numval = 0}, NULL, TUNABLE_SECLEVEL_%s, %s},\n", types[t][n][m], minvals[t][n][m], maxvals[t][n][m], - is_secure[t][n][m], env_alias[t][n][m]); + security_level[t][n][m], env_alias[t][n][m]); } } } -- cgit 1.4.1